HexBrain

Nextcloud · Report #358102

Disclosed Version of PORTS SSH|HTTP|SSL

Duplicatestatus
lowseverity
4upvotes
14 Jun 2018disclosed

How it was found

I found Version of ports are disclosed ,But the intersting that SSH port is open and showing his version ==> OpenSSH 7.2p2 Ubuntu 4ubuntu2.4 (Ubuntu Linux; protocol 2.0) F:302383 Searching I have found that this version has common vulunrablitie https://vuldb.com/?id.89622 So it's not good to disclose the version of this port(SSH)

Fix

make sure you have patched version or just by hiding his version

Impact

Give an attacker the ability to make specific attack

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original